Month: noviembre 2022

Intel BIOS firmware vulnerability CVE-2022-21198 Security Advisory Security Advisory Description Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may ... More info: https://support.f5.com/csp/article/K24359631?utm_source=f5support&utm_medium=RSS

Apache mod_userdir vulnerability CVE-2016-4975 Security Advisory Security Advisory Description Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. More info: https://support.f5.com/csp/article/K17296065?utm_source=f5support&utm_medium=RSS

Apache mod_authz_svn vulnerability CVE-2015-3184 Security Advisory Security Advisory Description mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache ... More info: https://support.f5.com/csp/article/K53556508?utm_source=f5support&utm_medium=RSS

Apache mod_cache vulnerability CVE-2013-4352 Security Advisory Security Advisory Description The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache ... More info: https://support.f5.com/csp/article/K28508558?utm_source=f5support&utm_medium=RSS

BIND vulnerability CVE-2022-2795 Security Advisory Security Advisory Description By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver ... More info: https://support.f5.com/csp/article/K11742512?utm_source=f5support&utm_medium=RSS

Apache mod_cluster vulnerability CVE-2016-8612 Security Advisory Security Advisory Description Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input ... More info: https://support.f5.com/csp/article/K15317908?utm_source=f5support&utm_medium=RSS

Apache mod_remoteip vulnerability CVE-2020-11985 Security Advisory Security Advisory Description IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using ... More info: https://support.f5.com/csp/article/K54358814?utm_source=f5support&utm_medium=RSS

The BIG-IP system may not interpret an HTTP request the same way the target web server interprets it Security Advisory Security Advisory Description This issue occurs when all of the following ... More info: https://support.f5.com/csp/article/K27551003?utm_source=f5support&utm_medium=RSS

Initial Publication Date: 2022/11/21 10:00AM EST A security researcher recently disclosed a case-sensitivity parsing issue within AWS AppSync, which could potentially be used to bypass the service’s cross-account role usage validations and take action as the service across customer accounts. No customers were affected by this issue, and no customer action is required. AWS moved immediately to correct this issue when it was reported. Analysis of logs going back to the launch of the More info: https://aws.amazon.com/security/security-bulletins/AWS-2022-009/

Multiple Oracle Java SE vulnerabilities CVE-2022-21597, CVE-2022-21634 Security Advisory Security Advisory Description CVE-2022-21597 Vulnerability in the Oracle GraalVM Enterprise Edition product ... More info: https://support.f5.com/csp/article/K21519731?utm_source=f5support&utm_medium=RSS